How A+ Tutoring uses your data and AI

What is stored

• The display name your teacher typed and the personal join code they issued. Students who join with a teacher code do not give an email address, password, date of birth or school record.
• Every line you type on a practice step, whether it was accepted, the hint shown, and the time. This is the evidence the report is built from. Time on task is estimated from those times; we do not run a keystroke or location tracker.
• Every question you ask the coach and the coach’s reply, with the item and step you were on.
• A cookie on your device that keeps you joined. It holds a random token, not your name.
• If a teacher or parent creates an account: their display name, email, password hash (when they set a password), and whether they asked for a weekly digest. Students never need that account.
• If a teacher or parent uses Continue with Google: the name, email and Google account id (subject) Google sends, and that the email is verified. That Google id is stored so the same adult can sign in again. Students cannot sign in with Google.
• Share codes a student creates, and the links they accept or revoke. A used or revoked code cannot open a new link.
• If a parent invites a child by email: the child’s email and name, a hashed one-time invite token, and when it was sent, used or cancelled. When the child accepts, they get a student record (join code and cookie) linked to that parent. If a student already exists with that email, the existing record is linked instead of creating another.
• Practice a teacher sets (the item, optional due date and a short note).

Who can see it

• You see your own report. You create share codes and can revoke a parent or teacher at any time. A parent invite you accept also creates that link.
• Anyone with the class code can see class totals: how many students are sound on each idea, how many finished each item, and the steps the class asks about most. No names.
• The teacher who owns the class, or anyone with the teacher key, can also read the roster (names and join codes), the per-student heatmap, and the questions students asked the coach. Keep that key and each join code out of other students’ hands.
• A parent or teacher you have linked sees only your named progress: mastery, time spent, weak areas, an illustrative band range, and recommended next steps. They do not see coach question text and they cannot start items as you.
• Nobody is ranked, and nothing here is a school mark. The band range is illustrative coverage, not a NESA prediction.

Where it is hosted

The site and its database run on Railway in Singapore (asia-southeast1). Sending student working outside Australia is an overseas disclosure under Australian Privacy Principle 8. The operator is responsible for the overseas hosts. Ask the operator if you need a written APP 8 assessment for a school.

Where the AI runs

• The coach is a Claude model from Anthropic. When you ask the coach, your question, the item, the steps you have done and your tries on the current step are sent to Anthropic’s API to generate the reply. Anthropic’s servers are outside Australia.
• If you press Listen on a coach reply, the reply (not your question) is rewritten as spoken words by the same Claude model and read aloud by Google Cloud Text-to-Speech. Only the reply text goes to Google. A reply can quote a phrase from your working.
• Nothing else is sent: not your name, not your class, not other students’ work.
• Marking of your steps is done by this site’s own rules, not by the AI. The AI can be wrong, and its replies are labelled as AI.

Analytics

If the operator has turned analytics on, the site uses a cookie-less analytics service. It records visits to public pages and four funnel events: opened the landing, joined a class, first item attempted, and first unaided return visit. Those events are names only. They do not include your display name, class code, join code, the item you were on, or the text you type. Private pages (practice, reports, the class view, the family view, the coach) are not sent as pageviews.

Weekly email

A teacher or parent can ask for a weekly digest. It is off unless the operator has configured an email provider. The mail names only students who have an active link (or who are in a class that teacher owns). It does not include join codes or coach replies. You can turn it off on the family or class view.

How long it is kept, and how to delete it

Practice lines and coach questions are kept while the class is active so the report and the class view work. A teacher can ask the operator to delete a class, which removes every student in it, their lines and their coach conversations. A parent or student can ask the same of the operator. There is not yet a self-serve delete button.

Age and consent

The Privacy Act does not set a single age of consent. The OAIC says an organisation may usually treat a person 15 or older as able to consent if it cannot assess each student. Teachers should still tell parents that the class is using this site, and schools should follow their own third-party software process. The coach answers only Mathematics Standard 2 and Physics. It will not discuss self-harm methods or sexual content. If a student is in distress it points them to Lifeline 13 11 14 and Kids Helpline 1800 55 1800.

What the coach will and will not do

• It answers Mathematics Standard 2 and Physics questions in full, on the item you are doing or anything else in those courses.
• Before you try a step, it gives hints and checks your draft without stating the step. After you try and miss, it can be direct.
• If it shows you a step, the item counts as done with help, not on your own, and it comes back later for you to do alone.
• The school can set a daily cap on questions per student so the cost stays bounded. When no cap is set, the default is 60 questions in 24 hours.